Various embodiments are provided for nullifying commands in an Internet of Things (IoT) computing environment by a processor. One or more authorized commands may be defined for each authorization level in a hierarchy of authorization levels for accessing data, services, or resources in the IoT computing environment via an IoT device. One or more users may be assigned to one of the authorization levels in the hierarchy of authorization levels. A command issued to the IoT device from the one or more users may be nullified according to the assigned authorization level.